Steve

Received another from transcriby today: https://www.spamcop.net/sc?id=z6714249413zc38513f3d9174ae4143330f04b9e2929z

I have received several (and reported) several originating from transcriby.com, and a few others. They all are in Russian. The abuse addresses are admin a7 at-sib dot ru, and noc#serverlux dot ru at devnull.spamcop.net which seem to be doing nothing to stop spam. https://www.spamcop.net/sc?id=z6714117615zfd7ff783b07e7f7b264f63bb6305a96ez

https://www.spamcop.net/sc?id=z6708286303z4f7c1f8214e7749e0d6dd2eceecfdafdz Refreshed the page and nothing changed. Should I manually report the email to the ISP associated with this IP address? Steve

https://www.spamcop.net/sc?id=z6695661322zbb963a3e6166ab06c375b2a272b2fbb8z This is the result I get from the SC parser upon trying to parse the email to report: I went ahead and manually reported the email to the abuse address since SC basically refused to. Steve

Yep, I do that every time I get a spam text. I also block the number it came from.

https://www.spamcop.net/sc?id=z6629778003z5e644dc4a48c7fddcdc37d472089d0f5z Tried refreshing the page several times and nothing worked to bring up the abuse contact for this IP Address. Upon running a check at whois.nic.ad.jp, I got this result: Let's see what happens when I manually report it to densan@town.bihoro.hokkaido.jp.

Just forward the email with full headers to abuse AT sendgrid DOT com (replace AT with @ and DOT with "."). They usually send an auto-reply email back letting you know they've received it and someone will handle the abuse report. Whether they actually take action, we'll never know. Steve

The "Show Original" option and then "Copy to clipboard" and then I paste into the submission field in SC and submit. Those emails are the only one I have problems with. All other emails go through fine.

Yeah, there's a body. This has happened in the past when trying to report spam from Gmail.

Tried that and got the same result as when I originally tried submitting the spam.

When submitting spam sent from gmail, I get this message: How do I correct that? Here is the tracking URL for said spam: https://www.spamcop.net/sc?id=z6612810826ze91817a6e8de425dff5c5f477fd46726z Steve

I've also been getting amazonaws spam. It seems another IP address is included in the spam. It's 143.220.15.131 and registered to the Association of Medical Colleges (AAMC). I have tried reporting the IP address via SC to AAMC to both the dns AT aamc DOT org (which the SC parser forwards to postmaster AT aamc DOT org) and the postmaster address postmaster AT aamc DOT org on several occasions. with no response/effect. I was almost tempted a few times to write a letter and send it to them asking why their IP address appears in AmazonAWS spam. It's also ALWAYS the same content with the SAME links that aren't valid such as {spam link removed} (which the parser doesn't pick up. It only detects t.co/bit.ly links which even those get redirected and dev/nulled to twitterdoesntcareaboutspamreports@devnull.spamcop.net) or in the case of bit.ly links, sent to abuse AT bitly DOT com. Previous emails were coming from Parsec Cloud, Inc. Citrix is now being used as the bottom of the emails. Here's the original tracking url: https://www.spamcop.net/sc?id=z6585617008z355af39de650b47648e218409deb1a46z {Quote of spam Deleted} -- To view the deleted material follow the tracking URL above. Here's the parsing results for the AAMC IP address and the tracking URL: https://www.spamcop.net/sc?id=z6585618727zdf96eb88f2edb7ba97b2dad603fed48ez Tracking message source: 143.220.15.131: Routing details for 143.220.15.131[refresh/show] Cached whois for 143.220.15.131 : dnsadministrator@aamc.orgUsing abuse net on dnsadministrator@aamc.orgNo abuse net record for aamc.orgUsing default postmaster contacts postmaster@aamc.org Clicking on the calendly link results in this: with the links being reported to abuse AT cloudflare DOT com. Not that CF can do anything to take down the link. Steve

Same here. I have had problems with reporting gmail users sending spam to SC and getting the "No body text provided, check format of submission. spam must have body text."

https://www.spamcop.net/sc?id=z6571118445z3f089fb00c95557d5b0557565f4701efz Why do reporting addresses for either an IP address associated with an email or a link in the email that SC finds an IP to associate with bounce and why does the ISP/host do nothing to fix it? Here's an example of a recent email below:

https://www.spamcop.net/sc?id=z6566177613zbe9f03927879099214d104a432d8c2c0z But wait... Tracking message source: 203.188.252.24: Routing details for 203.188.252.24[refresh/show] Cached whois for 203.188.252.24 : faruque@bangla.netinfo@bangla.net bounces (10 sent : 6 bounces)Using best contacts I even tried refreshing but will it will not update. Steve